* Add mechanism for Admission Webhooks to specify which version of AdmissionReview they support ([#74998](https://github.com/kubernetes/kubernetes/pull/74998), [@mbohlool](https://github.com/mbohlool))
    * Add mechanism for CRD Conversion Webhooks to specify which version of ConversionReview they support

1} one := Element{1, 0, 0, 0, 0} var xinv, r Element xinv.Invert(&x) r.Multiply(&x, &xinv) r.reduce() if one != r { t.Errorf("inversion identity failed, got: %x", r) } var bytes [32]byte _, err := io.ReadFull(rand.Reader, bytes[:]) if err != nil { t.Fatal(err) } x.SetBytes(bytes[:]) xinv.Invert(&x) r.Multiply(&x, &xinv) r.reduce() if one != r { t.Errorf("random inversion identity failed, got: %x for field element %x", r, x) } zero := Element{} x.Set(&zero) if xx := xinv.Invert(&x); xx != &xinv {...

- Fewer candidates are enumerated for preemption to improve performance in large clusters. ([#94814](https://github.com/kubernetes/kubernetes/pull/94814), [@adtac](https://github.com/adtac))
- Fix conversions for custom metrics. ([#94481](https://github.com/kubernetes/kubernetes/pull/94481), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]

// https://www.iana.org/domains/root/db/band.html
band

// bank : fTLD Registry Services LLC
// https://www.iana.org/domains/root/db/bank.html
bank

// bar : Punto 2012 Sociedad Anonima Promotora de Inversion de Capital Variable
// https://www.iana.org/domains/root/db/bar.html
bar

// barcelona : Municipi de Barcelona
// https://www.iana.org/domains/root/db/barcelona.html
barcelona

- Kubernetes 1.24 is built with go1.18, which will no longer validate certificates signed with a SHA-1 hash algorithm by default. See https://golang.org/doc/go1.18#sha1 for more details. If you are using certificates like this in admission or conversion ([#109024](https://github.com/kubernetes/kubernetes/pull/109024), [@stlaz](https://github.com/stlaz))

1} one := Element{1, 0, 0, 0, 0} var xinv, r Element xinv.Invert(&x) r.Multiply(&x, &xinv) r.reduce() if one != r { t.Errorf("inversion identity failed, got: %x", r) } var bytes [32]byte _, err := io.ReadFull(rand.Reader, bytes[:]) if err != nil { t.Fatal(err) } x.SetBytes(bytes[:]) xinv.Invert(&x) r.Multiply(&x, &xinv) r.reduce() if one != r { t.Errorf("random inversion identity failed, got: %x for field element %x", r, x) } zero := Element{} x.Set(&zero) if xx := xinv.Invert(&x); xx != &xinv {...

re-enable deprecated legacy behavior of treating the CommonName of X.509 serving certificates as a host name. This behavior has been disabled by default since Kubernetes 1.19 / go 1.15. Serving certificates used by admission webhooks, custom resource conversion webhooks, and aggregated API servers must now include valid Subject Alternative Names. If you are running Kubernetes 1.22 with `GODEBUG=x509ignoreCN=0` set, check the `apiserver_kube_aggregator_x509_missing_san_total` and `apiserver_webhooks_x5...

- The go version defined in `.go-version` is now fetched when invoking test, build, and code generation targets if the current go version does not match it. Set $FORCE_HOST_GO=y while testing or building to skip this behavior, or set $GO_VERSION to override the selected go version. ([#115497](https://github.com/kubernetes/kubernetes/pull/115497), [@liggitt](https://github.com/liggitt)) [SIG Release and Testing]

### Bug or Regression

- The go version defined in `.go-version` is now fetched when invoking test, build, and code generation targets if the current go version does not match it. Set $FORCE_HOST_GO=y while testing or building to skip this behavior, or set $GO_VERSION to override the selected go version. ([#115496](https://github.com/kubernetes/kubernetes/pull/115496), [@liggitt](https://github.com/liggitt)) [SIG Release and Testing]

### Failing Test

pkg crypto/tls, const VersionTLS11 ideal-int
pkg crypto/tls, const VersionTLS12 = 771
pkg crypto/tls, const VersionTLS12 ideal-int
pkg crypto/tls, type Config struct, MaxVersion uint16
pkg crypto/tls, type Config struct, MinVersion uint16
pkg crypto/x509, func MarshalECPrivateKey(*ecdsa.PrivateKey) ([]uint8, error)
pkg crypto/x509, type Certificate struct, CRLDistributionPoints []string
pkg crypto/x509, type Certificate struct, Extensions []pkix.Extension